Security Advisory
CVE-2019-19830
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
_core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database.